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Abstract 

^•^ We show that any boolean function can be evaluated optimally by a quantum query algo- 

f— ^ ritlim that alternates a certain fixed, input-independent reflection with a second reflection that 

^SJ coherently queries the input string. Originally introduced for solving the unstructured search 

f^_^ problem, this two-reflections structure is therefore a universal feature of quantum algorithms. 

C^ Our proof goes via the general adversary bound, a semi-definite program (SDP) that lower- 

^^ bounds the quantum query complexity of a function. By a quantum algorithm for evaluating 

^^ span programs, this lower bound is known to be tight up to a sub-logarithmic factor. The extra 

^^ factor comes from converting a continuous-time query algorithm into a discrete-query algorithm. 

' We give a direct and simplified quantum algorithm based on the dual SDP, with a bounded-error 

I— I query complexity that matches the general adversary bound. 
rS^ Therefore, the general adversary lower bound is tight; it is in fact an SDP for quantum query 

r^ complexity. This implies that the quantum query complexity of the composition f o {g, . . . ,g) of 
two boolean functions / and g matches the product of the query complexities of / and g, without 
a logarithmic factor for error reduction. It further shows that span programs are equivalent to 

^ quantum query algorithms. 



§ 



^ 1 Introduction 

> 

T— I The query complexity, or decision-tree complexity, of a function measures the number of input bits 

^^ that must be read in order to evaluate the function. Computation between queries is not counted. 

,__! Quantum algorithms can run in superposition, and the quantum query complexity therefore allows 

lyj coherent access to the input string. Quantum query complexity with bounded error lies below 

^^ classical randomized query complexity, sometimes with a large gap [BV97, Sim97, Sho97, Aar09], 

^^ but for total functions [BBC'*' 01] or partial functions satisfying certain symmetries [AA09] the two 

measures are polynomially related; see the survey [BW02]. 

Although the query complexity of a function can fall well below its time complexity, studying 



> 



^ query complexity has historically given insight into the power of quantum computers. For example, 

H the quantum part of Shor's algorithms for integer factorization and discrete logarithm is a quantum 

query algorithm for period finding [Sho97]. Unlike for time complexity, there are also strong 
information-theoretic methods for placing lower bounds on quantum query complexity. These 
lower-bound techniques can be broadly classified as using either the polynomial method [BBC^Ol] 
or the adversary method [Amb02, SS06]. H0yer and Spalek [HS05] have surveyed the development 
of these two techniques and their multitude of applications. For now, suffice it to say that the two 
techniques are incomparable. In particular, for the n-input collision problem, the best adversary 
lower bound is of 0(1), whereas the correct complexity, determined by the polynomial method [AS04] 
and a matching algorithm [BHT98] is 0(n^'^). 



However, H0yer, Lee and Spalek [HLS07] discovered a strict generalization of the adversary 
bound that remains a lower bound on quantum query complexity: 

Definition 1.1 (Adversary bounds). For finite sets C and E, and T> C C"', let f : D ^- E. 
An adversary matrix for f is a |D| x I'D] real, symmetric matrix T that satisfies {x\T\y) = for 
all x,y gD with f{x) = f{y). Define the adversary and general adversary hounds for f by 

Adv(/) = max & — -—r (1.1) 

r>o maxjfz[n] W ° ^j\\ 

Adv±(/) = max "^|' . n • (1.2) 

r maXjgr^i ||i o Aj|| 

Both maximizations are over adversary matrices T, required to be entry-wise nonnegative in Adv(/). 
To Aj denotes the entry-wise matrix product between T and Aj = J2xvgv-x =/=y I^X^I- 

Although the definitions of the two adversary bounds are very similar, the general adversary 
bound is much more powerful. In fact, the general adversary lower bound is always nearly tight: 

Theorem 1.2 ([Rei09a]). For any function f : T> ^ E, with T) C C", the quantum query complexity 
Q{f) satisfies 

QU) = 0(Adv^(/) J„^^;t'4) loglCI . log m) . (1.3) 

This surprising upper bound follows from a connection between quantum query algorithms 
and the span program computational model [KW93] first observed in [RS08] and significantly 
strengthened in [Rei09a, Rei09b]. Note that the original statement [Rei09a, Theorem 10.2] of 
Theorem 1.2 restricted to the case |C| = 2 and included an additional factor of log log \E\ — this 
factor can be removed by [BNRW05, Corollary 3]. Lee has shown that the general adversary bound 
of a function with boolean output is stable under encoding the input into binary [Lee09] , allowing 
the restriction \C\ = 2 to be removed at a logarithmic cost. 

Theorem 1.2 and the connection between span programs and quantum query algorithms behind 
its proof have corollaries including a query-optimal and nearly time-optimal quantum algorithm 
for evaluating a large class of read-once formulas over any finite gate set [Rei09c]. However, is 
Theorem 1.2 optimal? The factors of log \C\ and log \E\ are natural, but the log over log log term 
is not. It comes from converting a certain continuous-time query algorithm into a discrete-query 
algorithm following [CGM"'"09]. This conversion also somewhat obscures the algorithm's structure. 

It was conjectured that the unnatural log over log log factor could be removed [Rei09a, Conjec- 
ture 11.1]. In this article, we confirm the conjecture: 

Theorem 1.3. For any function f : D ^ {0, 1}, with D C {0, 1}", the general adversary bound 
characterizes quantum query complexity: 

g(/) = e(Adv±(/)) . (1.4) 

Theorem 1.3 suffices to simplify Eq. (1.3) following the proof of [Rei09a, Theorem 10.2]: 
Corollary 1.4. For finite sets C and E, D CI C", and any function f -.D ^ E, 

Q{f) = n{Adv^if)) and Q(/) = 0(Adv±(/) log |C| • log |i?|) . (1.5) 



Theorem 1.3 also allows for obtaining optimal results for the query complexity of composed func- 
tions. For / : {0, 1}" -^ {0, 1} and g : {0, 1}™ -^ {0, 1}, let f • g be the function {0, 1}""" -^ {0, 1} 
defined by (/ • g){x) = f[g{xi, ..., Xm), ■ ■ • ,5(a^(n-i)m+i, • • • , Xnm))- A bounded-error algorithm 
for evaluating f • g can be built from composing bounded-error algorithms for / and g; thus, 
Q{f * g) = 0[Q{f)Q{g)logQ{f)). However, the logarithmic factor for error reduction can be 
removed, and there is a matching lower bound: 

Theorem 1.5. Let f : {0, 1}" -^ {0, 1} and g : {0, 1}"^ -^ {0, 1}. Then 

Q{f»9) = &{Q{f)Qi9)) ■ (1-6) 

Proof. The general adversary bound composes as Adv {f • g) = Adv (/)Adv (g) for boolean 
functions / and g [HLS07, Rei09a], so the claim follows from Eq. (1.4). D 

The algorithm behind Theorem 1.3 is substantially simpler than the algorithm for Theorem 1.2, 
although its analysis requires slightly more work. On input x € {0,1}", the algorithm consists 
of alternating applications of the input oracle Ox — a unitary that maps \i,b) to |i,Xj©6), for 
i = 1, . . . ,n and b G {0, 1} — and a certain fixed reflection. The reflection is about the eigenvalue-zero 
subspace of the adjacency matrix Ac for a graph G derived from a dual SDP for Adv . This structure 
is based on Ambainis's AND-OR formula-evaluation algorithm [Amb07]. A previous algorithm in 
Szegedy's quantum walk model [Sze04] ran in 0(Adv (/)|| abs(AG')||) queries, where || abs(^G)|| is 
the operator norm of the entry- wise absolute value of Aq [Rei09a, Prop. 9.4]. Ambainis's approach 
efficiently removes the dependence on higher-energy portions of the adjacency matrix Ac- The 
analysis of the algorithm needs to transfer an "effective" spectral gap for the adjacency matrix of a 
related graph into an effective spectral gap for the product of Ox and the fixed reflection. 

In fact, the input oracle is itself a reflection, O^ = 1. Therefore the algorithm consists of 
alternating two fixed reflections, much like Grover's search algorithm [Gro96]. It follows that 
every boolean function can be evaluated, with bounded error, optimally in this way. While known 
algorithms can in principle be converted into this form [ReiODa, Theorems 3.1, 5.2], we do not know 
an explicit closed form for the second reflection, e.g., for the collision problem. 

The bipartite graph G can be thought of as a span program [KW93], and was constructed 
in the span program framework of [Rei09a]. Thus our algorithm is naturally seen as a quantum 
algorithm for evaluating span programs. Since the best span program for a function has witness 
size exactly equal to the general adversary bound [Rei09a, ReilO], Theorem 1.3 also implies that 
quantum computers, measured by query complexity, and span programs, measured by witness size, 
are equivalent computational models for evaluating boolean functions. For simplicity, though, we 
will not detail this connection further. We will require from [Rei09a] only Theorem 3.2 below, which 
without reference to span programs gives an effective spectral gap for a bipartite graph. 

Barnum, Saks and Szegedy [BSS03] have given a family of SDPs that characterize quantum 
query complexity according to their feasibility or infeasibility, instead of according to the optimum 
value of a single SDP. The BSS SDPs work for any specified error rate, including zero. The general 
adversary bound is a polynomially smaller SDP, but of course the truth table of a function is 
typically exponentially long. Whereas our algorithm uses a workspace of n + O(logn) qubits to 
evaluate an n-bit boolean function (by [Rei09a, Lemma 6.6]), n + 1 qubits suffice by [BSS03]. To the 
author's knowledge, neither the BSS SDPs nor Adv have ever been solved directly for a nontrivial, 
asymptotically large family of functions, with better than a constant-factor improvement over the 
adversary bound (see [CL08]). However, the easy composition rule for Adv , used in Theorem 1.5, 



allows for computing Adv for a read-once formula by multiplying the bounds computed for 
constant-size gates. It may be that the very simple form of our algorithm will allow for further 
progress in the understanding and development of quantum query algorithms. 

1.1 Open problems 

An appealing open problem in quantum computing is to show a tighter relationship between classical 
and quantum query complexities for total functions — the largest known gap is quadratic but the 
best upper bound is D{f) = 0{Q{f)^) [BBC^Ol]. Speculatively, the strong composition properties 
of quantum algorithms for total boolean functions may be a tool for approaching this problem. It 
also remains interesting to study non-boolean functions, their composition and the necessity of the 
log \C\ and log \E\ factors in Eq. (1.5). Theorem 1.5, the two-reflections form of the algorithm, and 
the elimination of the log Adv (/) factor suggest that it may be possible to adapt the algorithm to 
evaluate any boolean function / with a bounded-error input oracle with the same asymptotic number 
0(Adv (/)) of quantum queries, following [HMW03] for the OR function. Classically, in the noisy 
decision-tree model, an extra logarithmic factor for error reduction is sometimes required [FRPU94] , 
but this factor is not known to be needed for any quantum query algorithm [BNRW05]. 

1.2 Definitions 

For a natural number n G N, let [n] = {1, 2, . . . ,n}. For a bit b G {0, 1}, let 6 = 1 — 6. For a 
finite set X, let C^ be the Hilbert space C'^' with orthonormal basis {\x) : x G X}. For vector 
spaces V and W over C, let C{V, W) denote the set of all linear transformations from V into W, 
and let C{V) = C{V, V). \\A\\ is the spectral norm of an operator A. 

2 The algorithms 

For a boolean function, taking the dual of the general adversary bound SDP in Definition 1.1 gives: 

Lemma 2.1 ([Rei09a, Theorem 6.2]). Let f : V ^ {0, 1}, with V C {0, 1}". For b G {0, 1}, let 
Fb = {xeV: f{x) = b}. Then 

Adv (/) = min max > lll^xi)!! 

m&N,{\v^,)eC"^:xGV,je[n]}: ^e^? ^^^ (2.1) 

yix,y)eFoxFi,J2.ie[n]:xj^yj Kj>M>=l 

Based on a feasible solution to this SDP with objective value W{> 1), we will give three algorithms 
for evaluating /, each with query complexity 0{W). (A feasible solution corresponds to a span 
program in canonical form, and its value equals the span program witness size [KW93, ReiODa].) 
Let I =[n\x {0, 1} x [m]. Let \t) e C^o and A £ £(C^o, C-^) be given by 

\t) = -^ y \x) 

-4 = y k)0'>%l ® {vxj\ ■ 

xeFoJ^ln] 



Let G be the weighted bipartite graph with biadjacency matrix Bq G C{C^^> © C^, C^''): 

BG={\t) A) . (2.3) 

That is, G has a vertex for each row or column of Bq; its vertex set is the disjoint union Fq U {0} U /. 
Edges from Fq to {0} Dl are weighted by the matrix entries. The weighted adjacency matrix of G is 

Let A G C^^QPo'JiOjur-^ ^^ ^j^g orthogonal projection onto the span of all eigenvalue-zero eigen- 
vectors of Ag- For an input x GT>, let n^^ G C(^C^oU{o}ul-^ ^^ ^j^^ projection 

n, = 1- Yl \j,xj,k){j,x,,k\ . (2.5) 

je[n],fce[m] 

That is, n^; is a diagonal matrix that projects onto all vertices except those associated to the input 
bit complements Xj. Finally, let 

[/^ = (2n^-l)(2A-l) . (2.6) 

Ux consists of the alternating reflections 2 A — 1 and 2Ilx — 1 • The first reflection does not depend 
on the input x. The second reflection can be implemented using a single call to the input oracle Ox- 
We present three related algorithms, each slightly simpler than the one before: 



Algorithm 1: 

1. Prepare the initial state |0) G C^oU{o}ul ^ 

2. Run phase estimation on Ux, with precision 5p = iQ^^r and error rate 6e = jq- 

3. Output 1 if the measured phase is zero. Otherwise output 0. 



Algorithm 2: 

1. Prepare the initial state ^(|0) + |1)) |0) G C^ © c^"^^°>^^ 

2. Pick T G [[lOOVF]] uniformly at random. Apply the controlled unitary |0)(0| © 
1 + |1)(1|®C/J. 

3. Measure the first register in the basis ^(|0)ib|l)). Output 1 if the measurement 
result is ^(|0) + |1)), and output otherwise. 



Algorithm 3: 

1. Prepare the initial state |0) G C^"^^"^^-^. 

2. Pick T G [[lO^VF]] uniformly at random. Apply Uj. 

3. Measure the vertex. Output 1 if the measurement result is |0), and output 
otherwise. 



Phase estimation on a unitary V with precision 5p and error rate 5e can be implemented using 
0( J- log J-) controlled applications of V [NWZ09], so the first algorithm has 0{W) query complexity. 
The second algorithm essentially applies a simplified version of phase estimation. Intuitively, it 
works because it suffices to distinguish zero from nonzero phase. The third algorithm does away with 
any phase estimation. Intuitively, this is possible because Ux is the product of two reflections, so its 
spectrum is symmetrical. The second and third algorithms clearly have 0{W) query complexity. 
The factor of 10^ in the third algorithm's query complexity can be reduced by three orders of 
magnitude by adjusting downward the scaling factor for \t) in Eq. (2.2). 

The time, or number of elementary operations, required to implement the reflection 2A — 1 is 
unclear. In practice it may still be preferable to use the potentially less query-efficient quantum 
walk algorithm from [Rei09a], as done for evaluating formulas in [Rei09c, RS08, ReiODd, ACR^IO]. 

In the following section, we will show that all three algorithms correctly evaluate /(x), with 
constant gaps between the soundness error and completeness parameters. 

3 Analysis of the algorithms 

To analyze the above algorithms, we shall study the spectrum of the unitary Ux = {2Ilx — 1)(2A — 1). 
For this purpose, it will be useful to introduce two new graphs, following [RS08, ReiODa]. 
Let n(x) = X^jgM \j){j\ ^ \xj){xj\ (8) l^M £ ^(C^), and let G{x) and G'{x) be the weighted 
bipartite graphs with biadjacency matrices 

^=<^) = Co nt)) ""'' ''-w = (nt)) ■ <="" 

Based on the constraints of the SDP in Lemma 2.1, we can immediately construct eigenvalue-zero 
eigenvectors for G{x) or G'{x), depending on whether /(x) = 1 or /(x) = 0: 



Lemma 3.1. If f{x) = 1, let |^) = -3Vw\0) + EMn] b>i) ^ l^-i) ^ Cio>u/. Then BG(x)\i^) = 
and\{0m''/\mf>9/W. 

If fix) = 0, let \ij) = -\x) + Eie[n]lj>%) » \vxj) e C^°^^ Then sJ.,(,)|V'> = and 

\m)\'/\mf>i/{9w{w+i)). 

Let us recall from [ReiOQa]: 

Theorem 3.2 ([Rei09a, Theorem 8.7]). Let G' be a weighted bipartite graph with biadjacency matrix 
Be G /:(C^,C^). Assume that 5 > and |t),|V') G C^ satisfy 31,1^;) =0 and \{t\ij)\^ > <5|||'(/')f • 
Let G be the savfie as G' except with a new vertex, 0, added to the U side, with outgoing edges 
weighted by the entries of\t). That is, the biadjacency matrix of G is 

U 
BG={\t) Bgi)t (3.2) 

Let {|a)} be a complete set of orthonormal eigenvectors of the weighted adjacency matrix Aq, with 
corresponding eigenvalues p{a). Then for all 7 > 0, the squared length of the projection of |0) onto 
the span of the eigenvectors a with \p{a)\ < 7 satisfies 

Y. \{a\0)f<8j'/6. (3.3) 

a:|p(a)l<7 



Substituting Lemma 3.1 into Theorem 3.2, we thus obtain the key statement: 

1, then ^G(x) has an eigenvalue-zero eigenvector \^p), supported on the 

2 



Lemma 3.3. // f{x] 
column vertices, with 



2 - 10 



(3.4) 



If f{x) = 0, let {\a)} be a complete set of orthonormal eigenvectors of Aqm with corresponding 
eigenvalues p(a). Then for any c> 0, 



E 

a:\p{a)\<c/W 



(a|0)|2<72(l + i^jc- 



(3.5) 



By choosing c a small positive constant, Eq. (3.5) gives an 0{1/W) "effective spectral gap" for 
eigenvectors of ^g(x) supported on |0); it says that |0) has small squared overlap on the subspace 
of 0(l/VF)-eigenvalue eigenvectors. 

So far, we have merely repeated arguments from [Rei09a]. The main step in the analysis of our 
new algorithms is to translate Lemma 3.3 into analogous statements for Ux'- 



Lemma 3.4. If f{x) = 1, then Ux has an eigenvalue-one eigenvector \lp) with 



|2 - 10 



(3.6) 



If f{^) = 0; let 11/3)} he a complete set of orthonormal eigenvectors of Ux with corresponding 
eigenvalues e^^"\ 0{fi) G (— 7r,7r]. Then for any > 0, 



E 

/3:|e{/3)|<0 



2 < (2^mw + 



e\2 



(3.7) 



Assuming Lemma 3.4, the algorithms from Section 2 are both complete and sound. If f{x) = 1, 
then the first, phase-estimation-based algorithm outputs 1 with probability at least 9/10 — 5e = 4/5. 
If f{x) = 0, then setting Q = 5p = jg^, the algorithm outputs 1 with probability at most 
5e + (2\/60VF -|- ®)2 < 2/5. The probability the second algorithm outputs 1 is the expectation 
versus Toi\\\{l + C/J)|0)f . If f{x) = 1, this is at least 9/10 for all T. If f{x) = 0, let r = [lOOW^] 
and simplify 



E' 



Te 



R\T-\ 



'\m + ul 



E. 



TeR[ 



E 



r\ [i E 



l + eie(/3)T|2 



2 + 



MP){r+l) 



-ie{p)T 



iem 



(3.8) 



Setting 6 = gg^ and ^ = {2VgQW -\- ®)2, we see that the algorithm outputs 1 with probabihty at 
most ^ -|- (1 — ^)(^ -|- l/(4r sin ®)) < 88% for T^ > 1. As its analysis requires more care, we defer 
consideration of the third algorithm to the end of this section. 

For the proof of Lemma 3.4 we will use the following characterization of the eigen-decomposition 
of the product of reflections, essentially due to Jordan [Jor75]. Its use is common in quantum 
computation, e.g., [NWZ09, Sze04, MW05]. 



Lemma 3.5. Given two projections H and A, the Hilbert space can be decomposed into orthogonal 
one- and two-dimensional subspaces invariant under U and A. On the one- dimensional invariant 
subspaces, (211 — 1)(2A — 1) acts as either +1 or —1. Each two-dimensional subspace is spanned by 
an eigenvalue-X eigenvector \v) of AHA, with X £ (0,1), and \v-^) = {1 — A)Il\v) /\\{1 — A)Il\v)\\. 
Letting 9 = 2arccosvA G (0,7r), so Il\v)/\\Il\v)\\ = 0082!^) -\- sin :^\v-^) , the eigenvectors and 
corresponding eigenvalues of (211 — 1)(2A — 1) on this subspace are, respectively, 

l^^^^l^^^ and e^^r (3.9) 



V2 

Proof of Lemma 3.4- Notice from Eqs. (2.3) and (3.1) that G is naturally a subgraph of G{x). 
Since AqA = by definition of A, Aqi^\A = r(l — lix), where T is a permutation matrix. 

First consider the case f{x) = 1. Let \ip) be the restriction of \tp) from Eq. (3.4) to the 
vertices of G. Since IV') has no support on the extra vertices of G{x), \\\^)\\ = |||V')II a^iid \ip) is an 
eigenvalue-zero eigenvector of Aq; A\ip) = \ip). Also na;!^?) = \ip), so indeed Ux\^) = \'^)- 

Next consider the case f{x) = 0. Let 

10= E 1/5)^/^10) (3.10) 

/3:|0(/3)|<e 

be the projection of |0) onto the space of eigenvectors with phase at most 8 in magnitude. Our aim 
is to upper bound |||C)|P = (0|C) = KO|C)P, where |C) = |C)/IIIC)II- Notice that |C) is supported only 
on eigenvectors |/3) with 0{(5) 7^ 0, i.e., on the two-dimensional invariant subspaces of Ila; and A. 
Indeed, if Ux\P) = |/3), then either |/3) = n^|/3) = A|/3) or |/3) = (1 - n^)|/3) = (1 - A)|/3). The first 
possibility implies ^g(2.)|/3) = 0, so by Eq. (3.5) with c = 0, (0|/3) = 0. In the second possibility, 
also (0|/3) = (0|n^|/3) = since |0) = n^|0). 
We can split (0|C) as 

(o|C) = (o|A|C) + (o|n,(i-A)|C) 

<K0|A|c)| + K0|n,(i-A)|C)| (3.11) 

<K0|A|c)| + ||n.(i-A)|C)|| . 

Start by bounding the second term, ||n2,-(l — A)|C)||. Intuitively, this term is small because \C,) 
is supported only on two-dimensional invariant subspaces where A and Ila^. are close. Indeed, let 
|-/3) = (2A - 1)1/3), an eigenvector of Aq with phase 9{-P) = -6'(/3). Expanding |0 = Y.fiCp\P), 

||n.(i-A)|c)f = |l5;n,.(i-A)c^|/3)f 

= Y. l|n.(l-A)(c^|/3) + c_^|-/3))f 

/3:e(/3)>0 

= Y. Sin' ^ 11(1 -A)(c^|/3)+c_;3|-/3»f 

/3:e(/3)>0 

0\2 .>..2 



<(^j ||(l-A)|C)r • (3.12) 

It remains to bound |(0|A|C)| = |(0|u;)|||A|C)||, where \w) = A\()/\\A\()\\ is an eigenvalue-zero 
eigenvector of Aq- Intuitively, if |(0|t(;)| = |(0|na;|tt;)| is large, then since Ac and Aq(^^-^ are the 



same on n^^, [[^(^(^.^Iti;)!! = ||T(1 — n^,.)!^)!! will be small. This in turn will imply that \w) has large 
support on the small-eigenvalue subspace of ^g(x)7 contradicting Eq. (3.5). 
Beginning the formal argument, we have 



|2 



I^G(.)^IC)r = ll(i-n.)A|c)|h 

= Y. ll(l-n.)A(c^|/3> + c_;3|-/3»f 

/3:9(/9)>0 

= ^ sin^^||A(c,|/3) + c_,|-/3))f ^''''^ 

/3:e(/3)>0 

/e\2 



<- (I) IIMOIP . 



(3.14) 



Hence ||^g(x) 1^)11 < 0/2- 

Now split \w) = |ifsmaii) + l^big)j where for a certain d > to be determined, 

ksmaii) = ^ \a){a\w) 

a:\p{a)\<de/2 

l^big) = X] \a){a\w) . 

a:\p{a)\>d0/2 

Then 

|(0|A|C)| < mw)\ < KO|u;smaii)| + mwug)\ . (3.15) 

From Eq. (3.5) with c = deW/2, |(0|«;smaii)| < ^/72{1 + 1/W)c\\\wsme.ii)\\ < GdOW. 
Since Aq/^-^Iw) = X^„p(o)|a)(a|w), we have 

{^y > \\AGi.)\w)f 

= PG(x)|w^small)f + || Ag'(x) j-Wbig) f (3.16) 

>d'{^f\\\wu,)f . 

Hence |||wbig)|| < 1/d. 

Combining our calculations gives 

/ E K/3|o)l' = (Old < Ko|A|c)| + ||n.(i - A)|C)|| < adew + J + 1 • (3.17) 

y /3:|e(/3)|<0 

The right-hand side is 2\/6eW + G/2, as claimed, for d = I/Vg&W. D 

Having proved Lemma 3.4, we return to the correctness proof for the third algorithm. 

Proposition 3.6. If f{x) = 1, then the third algorithm outputs 1 with probability at least 64%. 
If f{x) = 0, then the third algorithm outputs 1 with probability at most 61%. 



Proof. Letting r = [lO^M^] , the third algorithm outputs 1 with probabihty 

Pi:=E^,^[,][|(0|[/J|0)p] =E^e.[.]|E^^'^''^^l^/^|0)l'r • (3.18) 

13 

If f{x) = 1, then a crude bound puts pi at least (9/10 - 1/10)^ = 64%. 

Assume f{x) = 0. Recall the notation that for an eigenvector |/3) with \0{(3)\ £ (0,7r), \—(3) = 
(2A — 1)1/3) denotes the corresponding eigenvector with eigenvalue phase 0{—P) = —6{j3). The key 
observation for this proof is that 

(0|/3) = e-^^(^)(0|-/3) . (3.19) 

This equal splitting of |(0|/3)| and |(0|— /3)| will allow us to bound pi close to 1/2 instead of the trivial 
bound pi < 1. The intuition is that after applying Ux a suitable number of times, eigenvectors |/3) 
and |— /3) will accumulate roughly opposite phases, so their overlaps with |0) will roughly cancel out. 
For this argument to work, though, the eigenvalue phase ^(/3) should be bounded away from zero 
and from itvr. Therefore define the projections 

Ae = i; \m\ 

/3:|e(/3)|<e 

Aa= E \pm (3-20) 

/9:|e(/3)|>A 

S = 1 - Ae - Aa , 

where and A, < < A < tt, will be determined below. Lemma 3.4 immediately gives the 
bound 1 1 Ae 1 0)11 < 2\/6GVF + ®. We can also place a bound on ||Aa|0)||, using 

2(A - 1)|0) = (C/t - 1)|0) = E(e-^('^) - l)|/3)(/3|0) . (3.21) 

Expanding the squared norm of both sides gives 

\\{Ul - l)|0)f = 4Esin2 ^K/3|0)|2 > ||AA|0)f • Asin' ^ (3.22) 

and 

||(^t_i)|o)||2 = 4(i_||A|0)f)<2/5 . (3.23) 

In the second step we have used that ||A|0)|| > 9/10; provided that / is not the constant zero 
function, Aq must have an eigenvalue-zero eigenvector with large overlap on |0). Combining 
Eqs. (3.22) and (3.23) gives 

l|AA|0)f <— ^ . (3.24) 

10 sm"^ I 

Returning to Eq. (3.18), we have 

PI <E^e«M (||Ae|0)f + ||AA|0)f + J^ K/3|0)|2(e^^(«^ + e-^(/^n 

/3:e(/3)e{e,A] 

< (||Ae|0)f + ||AA|0)f )(2 - ||Ae|0)f - ||AA|0)f ) (3.25) 

/3:e(/3)e(e,A] 

10 



The algorithm chooses T at random to allow bounding the last term. Expanding this term gives 

/3,/3':0{/3),0(/3')e{0,A] 
6»,6I'G(0,A] 



2' 

6i,e'e(e,A] 

2l|S|0>r + - E K/3|0)n(/3'|0)|^( ^^ere^y-^ 



(3.26) 



^9(1 + ^ ^'Lie+o') i| )ll^|0)l 

2V mme_0,g(e,A]|eH''+«) - 1| 

1/. 1 \„„,„,„4 



2 V 2Tmin{sin0, sin A}/ 

Here for brevity we have written 6 and 6' for ^(/3) and 0{P'), respectively. In the second and fourth 
steps, we have used ^^^^(e ai K/3|0)I — ^ll^|0)|| • In the last step, we have used le**-^"*"^ ^ — 1| = 
2sin^^ > 2min{sin0, sin A}. Substituting the result back into Eq. (3.25) gives 



^^-'-2('-2rmin{siie,sinA})""^"'^""' 

< 1- Vl r^- — ^maxfl ^^r^ - (2V6QW + -Y,0^ 

2V 2rmin|sine,sinA|/ L lOsin^A V 2/ . 



(3.27) 



2r minjsin 0, sin A} . 
Setting A = vr - G and e = 1/(2000VF), for VF > 1 a calculation yields pi < 61%. D 
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